The Myth of Anonymization

Paul Ohm has a terrific new paper out on SSRN, Broken Promises of Privacy: Responding to the Surprising Failure of Anonymization (forthcoming in UCLA Law Review). It discusses how statistical techniques have made it increasingly easy to re-identify anonymized data sets, and to apply that information to other identification problems (for example, taking information from one’s movie ratings on Netflix and using it to figure out someone’s Facebook friends). This change in statistical power – enhanced by readily available computer computational power – undermines the exceptions embedded in many privacy regimes (think HIPAA) for anonymized data. Paul’s piece is an easy and powerful read. I’m going to assign it in my Information Privacy class next year, and it has changed how I think about regulating privacy. Highly recommended.

Death Knell for Google Books Settlement?

The class action lawsuit against the Google Books program has receded from its former prominence in news reports, but there has still been a lot of activity. The parties retreated into seclusion to negotiate a settlement last fall and then, faced with objections from the Department of Justice, negotiated some more and reached a new “Amended Settlement Agreement,” or ASA. (The Public Index at New York Law School is still the best online source for all the background on Google Books issues.)

Yesterday the Justice Department chimed in again (see news reports here and here), and it still does not like the settlement. In its court filing, the Department succinctly expresses its objections:

Although the United States believes the parties have approached this effort in good faith and the ASA is more circumscribed in its sweep than the original Proposed Settlement, the ASA suffers from the same core problem as the original agreement: it is an attempt to use the class action mechanism to implement forward-looking business arrangements that go far beyond the dispute before the Court in this litigation. As a consequence, the ASA purports to grant legal rights that are difficult to square with the core principle of the Copyright Act that copyright owners generally control whether and how to exploit their works during the term of copyright. Those rights, in turn, confer significant and possibly anticompetitive advantages on a single entity – Google.

That said, the DOJ is careful to add that the parties are trying hard, that the problem they want to solve is real and important, and that DOJ “is committed to working constructively with all stakeholders on the scope and content of an appropriate settlement of this matter.”

The flaws DOJ identifies in the ASA, however, are so fundamental that I highly doubt the settlement can be preserved. New York Law School’s James Grimmelmann, who has been following this case as closely as anyone in the legal academy, essentially agrees in his blog post about the DOJ filing: “These issues will not be resolved with quick patches, even if the parties were in the mood to revise and resubmit a second time.” Read more…

Reasons I’ll Be Fired

An anonymous student at BLS has started a great blog, You Can Wordify Anything If You Just Verb It. It collects the more… interesting… things said by both profs and students. I’m already spending significant cycles trying to guess the provenance of some of these quotes. Given that certain of them mention Internet Law, I have some initial suspicions.

The runner-up for Internet meme of the week is the Muppets’ “I’m On a Boat.” (This clip is not even vaguely SFW.)

Sharing the Blame: The Law and Morality of Punishing Collective Entities

BLS is having a great symposium that bears directly on infolaw issues such as cyber-harassment, defamation, illicit file-sharing, and so forth. My friends Mike Cahill and Miriam Baer are co-hosting, and my friend Peter Henning is a panelist in the afternoon. Best of all, it’s free!

When: Friday, February 5, 2010, 9:00AM — 4:15PM
Where: Subotnick Center, Brooklyn Law School, 250 Joralemon Street, Brooklyn, NY

Sign up

This Symposium will discuss the nature, ethics, and law of imposing punishment on collective entities. Does it make sense to impose blame on a group as a group, as opposed to its individual members? Even if blame is appropriate, how do we decide the proper form and amount of punishment? How do we even conceive of a group as having its own independent existence or identity? The answers to these questions have significant implications for the scope and enforcement of criminal law. Over the course of several panels, the Symposium will seek to derive broad general insights from various academic disciplines and will consider the practical legal applications of those findings. It will address the psychological processes that lead people to treat groups as having independent existence, and the moral and philosophical consequences of doing so. Later discussion will apply these lessons to the specific legal context of corporate crime.

Symposium Co-Chairs
Brooklyn Law School Professors Michael T. Cahill and Miriam H. Baer have organized this symposium.

See the brochure for a list of panelists / speakers, and for schedule information.

Google’s Bombshell

Update (1/14/2010): Verisign’s iDefense Labs traced the cyber-attacks on Google to a “single foreign entity consisting either of agents of the Chinese state or proxies thereof”. In response to Google’s statement and claims of hacking, a Foreign Ministry spokeswoman said, “China’s internet is open… China administers the internet according to the law. We have an explicit stipulation of what information and content could be spread over the internet.” That’s three lies for the price of one.

Google has announced that it will stop censoring results on its google.cn search engine, and may withdraw from the country altogether. This is the biggest development in the Internet filtering space in years, and it shows that Google’s statement that one can make money without being evil is taken seriously in the company’s headquarters. I have a few initial reactions, and will post a more considered response shortly.
First, it’s fascinating that the deciding factor was not censorship, but hacking and surveillance – Google apparently decided that Chinese monitoring of communications, and hacking of human rights activists’ Gmail accounts, was intolerable (at least in combination with censorship). To the company’s credit, they appear to have internalized the lessons Yahoo! learned so painfully from the Shi Tao debacle. Surveillance is a much harder problem to detect than filtering (where groups such as ONI operate as watchdogs), and hacking is difficult to trace. The combination appears to have been too much.
Second, it will be fascinating to see how China’s government reacts. Suppression of political dissent is a key objective of the CCP. Google has crossed a line in how China operates – differences of opinion are handled privately, not publicly. I think this is likely to draw a relatively harsh response – first, because Google has tossed down the gauntlet, and second, because they’ve embarrassed the PRC’s government. China works very hard to control the on-line information environment and part of the system’s power is its lack of visibility.
Third, I’ll be interested to see how other Western Internet firms react. This could either be a business opportunity (consider how Yahoo! handed over its China operations to Alibaba, a firm with no compunction about complying with censorship or surveillance requests) or a chance to follow Google’s lead and stand up for the corporate values most companies espouse.
Finally, imagine that google.cn stays up. Does Google’s decision make a difference? After all, filtered sites are still unreachable. I think that it does. As Sherlock Holmes put it, it’s the dog that doesn’t bark – when you know something is missing, you have a window into the deliberate decision of a sovereign (whether Google or China) to prevent you from accessing it. That alone is powerful.
Stay tuned! Props to many of my Internet Law students for bringing this to my attention – I’m proud of you!

Cybersieves Podcast

Harold O’Grady, who writes the BLS Library Blog, has a podcast up where we discuss Cybersieves. Bonus: mention of Bambauer’s Law of Sandwiches!

Juries and Fair Use

The Harvard Crimson’s Xi Yu has a good article today about the Tenenbaum case and its prospects on appeal. She kindly asked me for my thoughts on the case’s future. I want to expand a bit on how I see fair use. (Ah, yes, a “clarification” – I haven’t felt so much like a politician since I took those campaign contributions in return for my vote in a faculty meeting.) As copyright folks know, fair use is messy, case-specific, and fact-intensive; it’s a muddy standard and not a crystal rule. Thus, it’s generally something that ought to be handled by juries, upon which we depend for resolution of tough fact issues.

However, I don’t think that Tenenbaum was correct in arguing that his fair use claim should go before a jury. Judge Gertner rightly disposed of his fair use argument on summary judgment, for two reasons. First, Tenenbaum failed to support adequately his position under the four-factor test for fair use (see 17 U.S.C. 107). While those four factors aren’t exclusive, they are set forth as exemplars in the statute, and slighting them is a perilous strategy. It failed here and it deserved to.

Second, Tenenbaum’s ultimate argument was not about whether he fell within fair use. It was about re-writing fair use – asking the jury to nullify an otherwise airtight case of infringement because they disliked how Congress has drawn the fair use defense. (See Tenenbaum’s opposition to summary judgment at 2: “Joel counters this prosecution is not fair to him or to his generation. He asserts that the copyright statute did not envision free and open space of cyberspace. Any assumption that Congress deliberated and decided the fairness issue in this new cyber context is fallacious.” Props to Ray Beckerman.) Judge Gertner correctly shot this down. We look to the legislature to make this call – how to balance IP access rights with incentives – and not to randomly selected jurors. Plus, nullification is essentially civil disobedience in the court system. It should be saved (to the degree it’s used at all) for issues of the utmost importance. I love copyright, but I don’t pretend that getting free music rises to that level.

So, I think fair use should generally go to the jury, but I don’t think it should have in Tenenbaum’s case.
Please note I don’t in any way mean to criticize the article – I should have made this point more carefully, and Xi / CiCi was trying frantically to copy down my caffeinated dribble drivel to boot. But that’s the joy of blogging: I can expound at painful length on fair use, confident that only close friends and family will be bothered with it…

The Fair Use Hammer

The Joel Tenenbaum – RIAA case has produced a terrific opinion by Judge Nancy Gertner of the District of Massachusetts. (Hat tip: Ray Beckerman.) This is the most thoughtful, balanced, and insightful copyright opinion I’ve read in years. Its treatment of fair use is nuanced and careful, and it is required reading for anyone who works on or thinks about copyright.

There are many things worth discussing in this opinion, but one crucial one is the potential role of fair use as a forcing device. Read more…

Cybersieves

My article Cybersieves is now available in the Duke Law Journal. The team at Duke did a superb job editing and improving the piece, and I’m grateful. The abstract is:

This Article offers a process-based method to assess Internet censorship that is compatible with different value sets about what content should be blocked. Whereas China’s Internet censorship receives considerable attention, censorship in the United States and other democratic countries is largely ignored. The Internet is
increasingly fragmented by nations’ different value judgments about what content is unacceptable. Countries differ not in their intent to censor material—from political dissent in Iran to copyrighted songs in America—but in the content they target, how precisely they block it, and how involved their citizens are in these choices. Previous scholars have analyzed Internet censorship from values-based perspectives, sporadically addressing key principles such as openness, transparency, narrowness, and accountability. This Article is the first to unite these principles into a coherent methodology. Drawing upon scholarship in deliberative democracy, health policy, labor standards, and cyberlaw, this Article applies this new framework to contentious debates about sales of censorship technology by Western companies, public law regulation of these transactions, and third-party analysis of Internet censorship.

“Yankees Suck” Trademarked

according to The Onion. If my calculations are correct, I owe the Evil Empire approximately $9268.65 plus statutory interest. Coincidentally, this is roughly the same amount as an order of nachos and a domestic beer costs at the new Yankee Stadium.

“Interactive media is the next wave,” Cashman said. “With our upcoming mobile phone apps and web integration, we’ll soon be able to charge millions more people for using ‘Yankees suck’ in the privacy of their daily lives.”

In related news, you still cannot trademark “Sex Rod” on “apparel ‘ranging from anoraks to zori.’”

Protected by AkismetBlog with WordPress

Bad Behavior has blocked 4 access attempts in the last 7 days.